CVE-2021-1517
Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.
Una vulnerabilidad en la funcionalidad multimedia viewer de Cisco Webex Meetings y Cisco Webex Meetings Server, podría permitir a un atacante remoto autenticado omitir las protecciones de seguridad. Esta vulnerabilidad es debido al manejo no seguro del contenido compartido dentro de la funcionalidad multimedia viewer. Un atacante podría explotar esta vulnerabilidad compartiendo un archivo mediante la funcionalidad multimedia viewer. Una explotación con éxito podría permitir al atacante omitir las protecciones de seguridad e impedir que aparezcan diálogos de advertencia antes de que los archivos sean ofrecidos a otros usuarios
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2020-11-13 CVE Reserved
- 2021-06-04 CVE Published
- 2023-03-08 EPSS Updated
- 2024-11-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-693: Protection Mechanism Failure
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Webex Meetings Online Search vendor "Cisco" for product "Webex Meetings Online" | 41.3.5 Search vendor "Cisco" for product "Webex Meetings Online" and version "41.3.5" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | < 3.0 Search vendor "Cisco" for product "Webex Meetings Server" and version " < 3.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 3.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "3.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 3.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "3.0" | maintenance_release1 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 3.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "3.0" | maintenance_release2 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 3.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "3.0" | maintenance_release3 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 4.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "4.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 4.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "4.0" | maintenance_release1 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 4.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "4.0" | maintenance_release2 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 4.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "4.0" | maintenance_release3 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 4.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "4.0" | maintenance_release3_security_patch3 |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Server Search vendor "Cisco" for product "Webex Meetings Server" | 4.0 Search vendor "Cisco" for product "Webex Meetings Server" and version "4.0" | maintenance_release3_security_patch4 |
Affected
|